Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa
File: 98e886f1-cc44-3839-b7f0-048f0f3f04af.roa (raw, json)
Hash identifier: 0RkqMY50AK07vhuD6x1wYBWB6eUhmDJ0PV1TeAAkQ5k=
Subject key identifier: 7C:2C:8A:0F:8C:54:EF:4C:4E:A1:A5:38:22:03:DC:DD:E3:02:90:04
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F43285848547020322B6BA43A3CED9E00
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 206018
IP address blocks: 2602:fc09:f80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:20:32:2b:6b:a4:3a:3c:ed:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=af39206e-9c1c-490a-a73e-6b027130603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:a5:0b:d3:64:a0:11:a9:7b:72:67:90:3e:
f1:93:8a:4e:70:98:fc:d7:b9:aa:97:c5:c4:45:b1:
36:b4:05:35:33:51:c9:54:ce:a8:91:b5:3e:d5:08:
95:13:1e:8c:f4:48:12:f4:71:cc:d3:0e:46:5a:b2:
22:96:48:a4:89:c8:d3:bc:71:2b:bb:f2:7d:05:ec:
eb:4c:5f:79:06:9e:7d:d0:0a:91:98:25:4e:0f:ea:
45:7b:2e:f1:e5:19:c4:3e:ee:2b:40:39:c2:c5:d6:
a5:aa:89:ce:18:9d:8c:98:af:45:2c:ce:f2:65:eb:
f7:c3:f5:28:62:c8:e7:91:2b:0c:6d:91:74:0d:d4:
8a:e6:32:83:56:ad:a3:6e:74:e2:1a:7a:97:b5:97:
e8:4e:64:35:52:e9:0d:95:85:5c:b4:92:17:ad:a9:
80:f9:70:89:a3:9c:d7:7e:50:28:20:3c:73:e5:1a:
69:96:40:23:a2:cb:e5:c0:de:c0:a4:57:69:33:64:
19:db:70:7e:2a:42:81:57:73:a0:a3:fd:92:8a:75:
91:8c:f1:a6:1e:0d:92:22:66:1f:87:e9:6a:5d:53:
f3:48:9f:e0:34:e2:bc:ae:70:3d:76:cf:64:4d:c1:
e4:35:f3:48:58:9a:e2:af:5a:c5:2c:2a:da:27:a3:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:8A:0F:8C:54:EF:4C:4E:A1:A5:38:22:03:DC:DD:E3:02:90:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc09:f80::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:75:cf:3d:92:b7:bc:31:72:90:3a:68:3e:d8:2d:7f:4c:5a:
1e:28:b1:14:2d:0d:ed:f1:8f:4b:fc:a6:85:a3:cf:58:c9:0c:
38:57:b5:f6:54:9f:9f:7d:80:85:c7:e2:d3:be:66:d7:14:3a:
c3:db:a4:48:9b:fa:5e:a6:ae:f6:42:b1:05:d2:20:32:b7:c6:
78:ee:ec:d9:df:b4:30:6d:14:6f:c1:e1:75:5f:1e:a4:03:a0:
d1:6b:1e:f7:d1:2e:6d:e3:a3:52:65:32:86:4f:a7:d3:36:84:
f4:83:3a:2e:b7:8c:8d:ca:d0:7f:85:32:d3:af:03:8a:48:09:
09:bb:4e:99:35:71:57:80:ec:9e:2c:e6:d7:0e:cb:a7:08:8b:
83:0e:e0:47:79:a3:1e:3b:bd:f1:2e:b7:1a:4b:a9:ea:47:34:
75:0d:98:e0:3c:0b:41:24:8e:da:58:17:27:60:0a:41:5c:f6:
47:e2:61:67:fb:7e:4b:f6:5f:58:83:35:6f:66:05:f3:04:c5:
0c:b3:81:48:d0:82:6f:37:5c:af:40:90:90:68:db:88:3d:2e:
f4:89:e7:c7:bc:e5:bd:e5:2a:e6:30:d9:e0:03:d5:4b:49:42:
9e:b2:6e:94:70:5b:23:57:ae:50:2f:a9:33:1c:e3:5e:ae:45:
43:33:d5:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcCAyK2ukOjztngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
YWYzOTIwNmUtOWMxYy00OTBhLWE3M2UtNmIwMjcxMzA2MDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiralC9NkoBGpe3JnkD7xk4pOcJj817mql8XE
RbE2tAU1M1HJVM6okbU+1QiVEx6M9EgS9HHM0w5GWrIilkikicjTvHEru/J9Bezr
TF95Bp590AqRmCVOD+pFey7x5RnEPu4rQDnCxdalqonOGJ2MmK9FLM7yZev3w/Uo
YsjnkSsMbZF0DdSK5jKDVq2jbnTiGnqXtZfoTmQ1UukNlYVctJIXramA+XCJo5zX
flAoIDxz5RpplkAjosvlwN7ApFdpM2QZ23B+KkKBV3Ogo/2SinWRjPGmHg2SImYf
h+lqXVPzSJ/gNOK8rnA9ds9kTcHkNfNIWJrir1rFLCraJ6P8+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHwsig+MVO9MTqGlOCID3N3jApAEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOThlODg2ZjEtY2M0NC0z
ODM5LWI3ZjAtMDQ4ZjBmM2YwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ+A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHp1zz2St7wxcpA6aD7YLX9MWh4osRQtDe3xj0v8poWjz1jJDDhX
tfZUn599gIXH4tO+ZtcUOsPbpEib+l6mrvZCsQXSIDK3xnju7NnftDBtFG/B4XVf
HqQDoNFrHvfRLm3jo1JlMoZPp9M2hPSDOi63jI3K0H+FMtOvA4pICQm7Tpk1cVeA
7J4s5tcOy6cIi4MO4Ed5ox47vfEutxpLqepHNHUNmOA8C0EkjtpYFydgCkFc9kfi
YWf7fkv2X1iDNW9mBfMExQyzgUjQgm83XK9AkJBo24g9LvSJ58e85b3lKuYw2eAD
1UtJQp6ybpRwWyNXrlAvqTMc416uRUMz1ak=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:46 2025 by rpki-client